Description (CNA)
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / Safari | affected 0 before 26.1 |
| Apple / iOS and iPadOS | affected 0 before 26.1 |
| Apple / macOS | affected 0 before 26.1 |
| Apple / tvOS | affected 0 before 26.1 |
| Apple / visionOS | affected 0 before 26.1 |
| Apple / watchOS | affected 0 before 26.1 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/125632
- https://support.apple.com/en-us/125634
- https://support.apple.com/en-us/125637
- https://support.apple.com/en-us/125638
- https://support.apple.com/en-us/125639
- https://support.apple.com/en-us/125640
ADP enrichment
No English description supplied.
No references supplied.